Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/79bf1aaf-8b78-3710-b403-32f12b6f408e.roa
File:                     79bf1aaf-8b78-3710-b403-32f12b6f408e.roa (raw, json)
Hash identifier:          donGDhtpzJo035/A9FoJqqvlTQ9LxHNq/LBoumNZmX0=
Subject key identifier:   E2:1A:AE:C9:E6:33:49:C8:7F:1E:9E:0C:32:99:94:B7:67:E0:DC:97
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584E147ED5C547528C975FAE3A00
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/79bf1aaf-8b78-3710-b403-32f12b6f408e.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     26229
IP address blocks:        162.138.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:d5:c5:47:52:8c:97:5f:ae:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=0b476aaa-d1e9-43d7-a285-3f4375510fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e4:76:7f:64:ac:73:95:10:21:2f:33:07:39:
                    e0:99:69:83:f1:ed:e5:6a:30:79:a3:91:3e:3c:fa:
                    f0:e5:c4:57:f9:e0:2e:32:43:fc:cf:9a:c7:a4:f3:
                    bd:f3:c8:ba:77:dd:5c:74:0f:a1:fd:21:5b:94:05:
                    85:a3:06:c8:21:13:d2:81:06:16:f3:53:f7:f4:76:
                    13:e9:db:2b:21:93:72:6b:13:e2:6a:9c:5a:f1:30:
                    fd:6f:98:62:c9:8d:11:af:22:ee:c2:28:1b:ab:9a:
                    7a:9f:dc:8f:d3:b7:1f:e4:bf:3d:f4:19:2d:cd:8b:
                    8e:be:cd:38:76:98:8a:cd:a8:13:50:07:2f:ad:73:
                    9d:a7:a1:95:ac:a7:f3:fb:55:ba:67:9a:78:62:af:
                    d0:c2:54:a1:f7:1a:30:2b:4b:34:a6:3b:59:14:91:
                    f1:a3:23:8f:5f:10:01:2f:05:96:00:60:9e:43:c4:
                    2f:81:6d:34:60:2f:8b:40:ca:8c:6e:b0:b3:47:b2:
                    13:02:a4:19:e7:48:c8:ea:c4:f1:27:d7:ca:77:6a:
                    9e:d4:52:1a:02:2c:49:98:65:6d:15:be:dd:77:64:
                    09:9f:2a:b7:51:e5:1d:29:52:36:d4:d6:00:b7:0f:
                    1d:fa:c5:ce:ce:b3:83:80:0d:89:c9:23:c3:70:f7:
                    3c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1A:AE:C9:E6:33:49:C8:7F:1E:9E:0C:32:99:94:B7:67:E0:DC:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/79bf1aaf-8b78-3710-b403-32f12b6f408e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:1c:0a:7e:a4:a7:20:ea:55:9a:99:f6:c2:df:90:50:a4:
         7a:e6:a4:71:40:95:6e:b9:bb:38:54:bd:30:f4:8d:e4:01:42:
         8c:28:a2:5a:47:e5:1f:f4:d2:b3:90:30:52:21:1b:27:d4:88:
         2c:aa:ce:a6:64:bf:e6:19:d7:ec:c2:25:63:72:c1:f4:d3:4c:
         8a:06:ac:69:6b:af:e3:c4:89:a9:b1:1d:c1:70:7c:fe:97:2d:
         c3:b5:89:0e:84:36:e1:d9:e9:ea:33:4e:f3:11:5d:75:46:87:
         76:71:91:0e:aa:e0:6a:77:51:81:b3:ba:e4:9b:b3:03:4f:04:
         83:36:91:8b:0c:54:31:b4:33:a9:36:37:1c:11:06:a4:ae:e5:
         bf:b6:d5:a4:f5:cb:ce:f9:2f:b8:31:1c:94:f6:fb:31:1c:6d:
         4e:c6:1d:ca:50:2a:f1:2c:6b:6e:b8:c9:62:20:6a:ca:13:6e:
         cd:75:2d:df:08:74:30:b2:b8:d1:2b:dc:b6:44:35:38:26:91:
         10:bc:17:27:1a:b9:87:03:f9:1c:32:d4:91:19:4f:65:3b:9d:
         9e:9e:9e:8c:b8:3b:33:1e:76:98:9c:be:0e:45:bd:be:a2:be:
         5d:d1:45:45:76:dc:d1:78:ca:00:73:34:c7:a6:4b:b6:25:33:
         07:64:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:34:58 2026 by rpki-client